{"product_id":"soc-2-readiness-assessment-control-matrix","title":"SOC 2 Readiness Assessment \u0026 Control Matrix (Excel)","description":"\u003cp\u003e\u003cstrong\u003eFind your SOC 2 gaps, assign owners and track evidence before the auditor arrives.\u003c\/strong\u003e One Excel workbook with 148 controls written for a cloud-hosted SaaS company, mapped to all 61 Trust Services Criteria.\u003c\/p\u003e\u003ch2\u003eWhat you get\u003c\/h2\u003e\u003col\u003e\n\u003cli\u003e\n\u003cstrong\u003eScope sheet\u003c\/strong\u003e (Excel): report type, categories, in-scope systems and subservice organizations such as your cloud host.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCriteria sheet\u003c\/strong\u003e (Excel): all 61 criteria by ID with our own plain-English summaries, switching in or out with your chosen categories.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eControl Matrix\u003c\/strong\u003e (Excel): 148 controls across 18 domains, from governance and access control to privacy, each with the criteria it maps to, the related policy, owner, frequency, status, gap notes and target date.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eReadiness Dashboard\u003c\/strong\u003e (Excel): readiness by criteria series, with a flag for any in-scope series that has no control.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eEvidence Request List\u003c\/strong\u003e (Excel): 111 typical auditor requests (the PBC list), each linked to control IDs and marked for Type 1, Type 2 or both.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eInstructions sheet and Start Here guide\u003c\/strong\u003e (Excel and PDF): key terms in plain English and the order of work.\u003c\/li\u003e\n\u003c\/ol\u003e\u003cp\u003eAlso included in the \u003ca href=\"\/products\/soc-2-starter-bundle\"\u003eSOC 2 Starter Bundle\u003c\/a\u003e and the \u003ca href=\"\/products\/soc-2-compliance-toolkit\"\u003eSOC 2 Compliance Toolkit\u003c\/a\u003e.\u003c\/p\u003e\u003ch2\u003eHow to use it\u003c\/h2\u003e\u003col\u003e\n\u003cli\u003eComplete the Scope sheet: Type 1 or Type 2, categories, systems and vendors (30 to 60 minutes).\u003c\/li\u003e\n\u003cli\u003eWalk each control domain with its owner. Edit descriptions to match reality, set status honestly and mark N\/A with a reason (1 to 2 days).\u003c\/li\u003e\n\u003cli\u003eAdd target dates for everything not yet operating and feed the gaps into your project plan.\u003c\/li\u003e\n\u003cli\u003eReview the dashboard with leadership, then monthly.\u003c\/li\u003e\n\u003cli\u003eAssign owners to the evidence requests and start collecting now, even before you pick an auditor.\u003c\/li\u003e\n\u003c\/ol\u003e\u003ch2\u003eWho it is for\u003c\/h2\u003e\u003cp\u003eThe person asked to \"get us SOC 2\": a founder, CTO, first security hire or operations lead at a SaaS company. No prior audit experience needed. If you already use a compliance platform, use it to check the platform's control set against your real operations.\u003c\/p\u003e\u003ch2\u003eGood to know\u003c\/h2\u003e\u003cul\u003e\n\u003cli\u003eInstant download. Editable Excel (.xlsx) plus a PDF guide. Works in Excel 2016 or later, Microsoft 365, Google Sheets and LibreOffice; no macros.\u003c\/li\u003e\n\u003cli\u003eLicensed for use within one organization.\u003c\/li\u003e\n\u003cli\u003eCriteria are referenced by number and summarized in our own words; the AICPA criteria are free to download from the AICPA.\u003c\/li\u003e\n\u003cli\u003eSOC 2 is an attestation report by a licensed CPA firm, not a certification. These templates help you prepare; they do not guarantee an unqualified SOC 2 opinion.\u003c\/li\u003e\n\u003cli\u003e5-day fit guarantee: if it does not fit your system, contact us within 5 days of purchase.\u003c\/li\u003e\n\u003c\/ul\u003e","brand":"ISO Cloud Consulting","offers":[{"title":"Default Title","offer_id":67603739082946,"sku":"ICC-SOC2-CONTROL-MATRIX","price":59.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0709\/8361\/4658\/files\/soc-2-readiness-assessment-control-matrix.png?v=1790686128","url":"https:\/\/isocloudconsulting.com\/products\/soc-2-readiness-assessment-control-matrix","provider":"ISO Cloud Consulting","version":"1.0","type":"link"}